From under what account to administer PC users?

Question

Active Directory

Everywhere it is advised not to use the administrator's domain account to configure user PCs. And from under what account to do this? For example, the user needs to install an additional program, under whom should I log in?

Answer 1

Make an account in the policies that will not be an admin in the domain, but will be an admin on the PC and inflate these rules for this user throughout the domain.